AWS ACM certificates does not have logging preference misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_234
Category - Subcategory	Logging - Disabled or missing
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

To guard against SSL/TLS certificates that are issued by mistake or by a compromised CA, some browsers like Chrome require that public certificates issued for a domain be recorded in a certificate transparency log. The domain name is recorded, but not the private key. Certificates that are not logged typically generate an error in the browser.

How to Fix

[source,go]

resource "aws_acm_certificate" "example" { domain_name = "example.com" validation_method = "DNS"

• options {
• certificate_transparency_logging_preference = "ENABLED"
• } }

---